CVE-2020-7051: Codologic Codoforum

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.

Affected products

• Codologic Codoforum: up to and including 4.8.4

Published 2020-02-13. Last modified 2026-06-17.